Privacy Policy

1. Information We Collect

In the course of providing our services, we may collect and process the following categories of information:

• The WhatsApp phone number of the user interacting with our services
• For WA Messenger: account and workspace information for the connected business; contact lists uploaded by the business (names, phone numbers, tags); the content of WhatsApp messages sent and received through the connected account; message delivery and read status; and template message definitions
• For the business card service: images of business cards submitted through the WhatsApp interface, and structured contact information extracted from them — which may include names, phone numbers, email addresses, company names, physical addresses, GSTIN numbers, website URLs, and social media handles

We collect only the information necessary to deliver the features of these services.

2. How We Use Your Information

Information collected through our services is used solely for the following purposes:

• To operate WA Messenger on behalf of a connected business — sending template messages and campaigns, managing contact lists, and delivering customer replies through that business's own WhatsApp Business Account
• To extract and return structured contact information from submitted business card images
• To maintain a persistent contact list associated with a user's or business's account
• To facilitate the export of saved contacts in standard vCard format upon request

We do not use personal data for advertising, profiling, or any purpose beyond the delivery of these services.

3. WA Messenger — Our Role as a Data Processor

WA Messenger allows a business to connect its own WhatsApp Business Account (WABA), issued and managed by Meta, to send and receive messages through our dashboard. In connection with this service:

• We act as a data processor on behalf of the connected business for the contact lists it uploads and the message content it sends or receives through WA Messenger. The business remains the controller of that data and is responsible for the lawful basis on which it messages its contacts.
• To deliver messages, message content and recipient phone numbers are necessarily shared with Meta / WhatsApp via the WhatsApp Cloud API — this is required for the Service to function, as Meta's infrastructure is what actually sends and delivers each message.
• We do not use a business's contact lists or message content for any purpose other than operating WA Messenger on that business's behalf.

4. Third-Party Service Providers

Certain functions of our services are carried out with the assistance of trusted third-party providers and sub-processors. Each has access only to the data necessary for their specific role:

We do not sell, rent, or otherwise disclose personal data to any other third parties.

5. Processing of Third-Party Contact Information

6. Data Retention & Deletion

Contact information and message data saved through our services are retained for as long as the account or workspace remains active, or until a deletion request is submitted. There is no automatic expiry or scheduled purge of this data, as the purpose of our services is to provide a durable, accessible record.

Users and businesses may request deletion of their data at any time. Full instructions — including how a business can delete its entire WA Messenger workspace — are on our dedicated User Data Deletion page. Deletion requests are processed within 30 days of verification.

7. Data Security

We implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data is stored within managed database environments on Railway's infrastructure, with access controls restricted to authorised system components.

While we take the protection of your data seriously, no method of electronic storage or transmission over the internet can be guaranteed to be entirely secure.

8. User Rights and Controls

Users and businesses have the following rights with respect to their personal data:

• Send EXPORT to the bot at any time to receive a downloadable vCard file containing all saved contacts (business card service)
• Request deletion of personal data — see our User Data Deletion page for full instructions
• A business using WA Messenger may revoke our access to its WhatsApp Business Account at any time via Meta Business Settings → Business Integrations, independently of any request to us
• Submit a written request to ebharatsolutions.in@gmail.com to request access to, correction of, or deletion of personal data held in connection with an account
• Individuals whose contact information has been submitted or uploaded by a third party may similarly contact us to request its removal from our systems

9. Eligibility

Our services are intended for use by business professionals and businesses, and are not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Updates to This Policy

We reserve the right to update or revise this Privacy Policy from time to time in response to changes in our practices, legal requirements, or service offerings. Where changes are material, we will endeavour to notify active users and businesses in advance of the changes taking effect. The effective date at the top of this document reflects the date of the most recent revision.